Joint controllership of the interface
Article 5
1. As regards the processing of personal data in the interface, the Commission shall be a joint controller within the meaning of Article 28(1) of Regulation (EU) 2018/1725, and customs authorities and market surveillance authorities shall be joint controllers within the meaning of Article 26(1) of Regulation (EU) 2016/679. 2. The Commission shall enter into a joint controllership arrangement with the other joint controllers, to establish the respective responsibilities of the joint controllers and comply with the obligations under Regulations (EU) 2016/679 and (EU) 2018/1725. 3. The joint controllers shall ensure that they: (a) work together to process the requests made by the data subject in a timely manner; (b) assist each other in matters involving the identification and handling of any data breach related to joint processing; (c) exchange the relevant information necessary to inform data subjects pursuant to Section 2 of Regulation (EU) 2016/679 and Section 2 of Regulation (EU) 2018/1725; (d) ensure and protect the security, integrity, availability and confidentiality of the personal data processed jointly pursuant to Article 32 of Regulation (EU) 2016/679 and Article 33 of Regulation (EU) 2018/1725.